Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File:                     f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier:          F6R61Shtkgx75hMigzEzxidDxWhBItuvP1XU6RCblGk=
Subject key identifier:   FA:70:CA:07:4A:6E:5C:F4:FA:6E:17:D2:89:8D:96:0B:56:F1:90:19
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer:       /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial:       0A40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number:          0A36
Signing time:             Tue 12 May 2026 19:47:48 +0000
Manifest this update:     Tue 12 May 2026 19:47:48 +0000
Manifest next update:     Tue 19 May 2026 19:47:48 +0000
Files and hashes:         1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: Uh2/rdUUaJZSKSZV5jWKGZhp+pAUqR6kcEbR5tehAgY=)
                          2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624 (0xa40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
        Validity
            Not Before: May 12 19:47:48 2026 GMT
            Not After : May 19 19:47:48 2026 GMT
        Subject: CN=6a0383e4-8312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:84:49:2b:04:49:ce:77:a3:30:63:cd:f5:
                    c4:bc:8f:9c:71:a9:c8:0d:9d:81:56:23:ed:83:5b:
                    b0:a8:72:f3:c2:e7:cd:fd:f0:cc:e7:2f:fc:71:9e:
                    4f:91:63:2f:90:d8:6a:b3:5c:7a:0e:7e:96:2c:45:
                    49:5f:59:be:d6:f0:95:c2:7d:fd:cb:1a:66:4f:fb:
                    b0:8b:25:8f:c2:82:b4:1a:6c:b8:91:83:44:1b:87:
                    f6:cf:d8:86:db:7e:08:30:63:7d:cb:84:b3:f7:56:
                    00:10:6d:20:38:f7:2a:53:37:0b:d0:8a:9b:a9:ea:
                    9f:dd:59:0b:92:e5:03:bc:66:dc:26:31:8c:48:06:
                    58:7c:61:1f:de:56:87:a4:e3:4a:9c:3f:0a:fd:46:
                    af:c8:18:75:75:0d:39:c5:13:a6:ba:85:e6:1f:eb:
                    c6:c3:46:22:e2:77:29:d3:73:33:4d:40:69:11:39:
                    2f:e5:2c:68:37:c1:81:45:0f:40:26:fa:da:44:5e:
                    fc:e2:3c:7f:d1:72:51:d8:5a:e1:06:b8:85:d5:31:
                    e7:a9:57:dc:f2:d7:c3:c0:14:1c:b6:be:c1:0c:01:
                    9e:73:18:85:4e:e3:63:ca:31:a6:88:f1:cb:52:83:
                    42:20:00:ea:b0:09:fd:e2:60:ee:c2:7b:52:e5:56:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:CA:07:4A:6E:5C:F4:FA:6E:17:D2:89:8D:96:0B:56:F1:90:19
            X509v3 Authority Key Identifier:
                keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b0:6d:f8:e8:bc:6d:45:ee:eb:c4:79:64:1c:70:28:59:b0:
         6f:6f:09:d4:03:54:08:56:e2:a5:39:e5:fc:a8:3d:71:cb:09:
         39:a0:7d:8f:ce:8b:61:78:09:0f:6f:6d:a5:45:6a:60:02:64:
         3b:b3:f9:63:56:47:32:8e:9f:89:77:c3:e5:c9:f2:20:8c:08:
         45:12:44:bf:05:e5:92:c6:c3:bb:ff:83:0a:b2:9b:ce:ed:f1:
         83:c7:cb:23:82:1d:e9:64:99:7a:8b:a6:5c:29:73:61:5b:06:
         85:25:05:96:6e:6e:44:3a:be:67:d4:b0:fa:2f:eb:65:30:a9:
         19:3e:48:b7:34:7c:4d:31:8d:7d:f2:fa:28:73:bb:e6:af:3b:
         fc:11:e0:b8:7f:97:50:db:19:fa:4d:9f:b9:a2:88:7f:7a:a7:
         dd:29:b3:4d:31:0a:8d:68:a7:73:48:d7:72:4c:67:f2:da:78:
         d2:57:4a:dc:71:65:36:39:d9:44:4d:f5:dc:9b:fa:cb:2e:cc:
         a8:e7:47:74:22:a4:d0:5a:58:13:e8:6b:c1:ed:26:ee:9e:ca:
         7f:ca:19:4b:f7:b2:2b:71:4a:92:64:71:18:6b:d6:aa:c9:37:
         ad:14:67:a1:10:d1:9b:42:c1:d2:c3:a4:f2:4b:49:d7:d1:60:
         c6:6a:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:37 2026 by rpki-client